[IronPython] Authenticode Signing of Releases

2011-02-23 Thread Jeff Hardy
Older releases of IronPython were authenticode signed (by Microsoft), but so far the community releases have not been. As best I can tell, authenticode certificates are expensive (the cheapest are around $100/year) - I've heard of deals for open source projects but can't find anything by

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Vernon Cole
There is CAcert.org, who will issue a certificate which by fiddling IIRC can be made into a code signing certificate. But while CAcert.org is a * recognized* certificate authority, they are not a *trusted* authority (particularly, they are not trusted by Microsoft) so it's a lot of work to not

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Dave Wald
It would be better for acceptance and evangelistic purposes, in my shop anyway, (but that's another story...) Hell, I might even chip in a few bucks if need be. But I really don't care. I trust you guys... ;-) On 2/23/2011 10:58 AM, Jeff Hardy wrote: Older releases of IronPython were

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Jimmy Schementi
I'd vote for it not being worth it right now, unless someone wants to donate the money, and even then it makes things more complex. ~Jimmy On Wed, Feb 23, 2011 at 3:39 PM, Dave Wald davew...@tx.rr.com wrote: It would be better for acceptance and evangelistic purposes, in my shop anyway, (but

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread Steve Dower
It's easiest if someone donates a personal certificate, which then puts their name on the releases (as is done with TortoiseSVN and TortoiseHG, for example). However, without a sponsor organisation it's very hard to get hold of a trustworthy certificate (which a personal one is generally not).

Re: [IronPython] Authenticode Signing of Releases

2011-02-23 Thread andrew Wilson
I can reach out to my company, we are a CA, to see if they'd sponsor a cert? Sounds like folk aren't much interested in that though. -A On Wed, Feb 23, 2011 at 1:57 PM, Steve Dower s.j.do...@gmail.com wrote: It's easiest if someone donates a personal certificate, which then puts their name

Re: [IronPython] GSoC 2011: Interested Students

2011-02-23 Thread Afriza N. Arief
Hi, I think mentoring organizations don't need to get students before applying for GSoC. This will allow students who didn't know about the mentoring organization to join and start knowing and contributing. It will also be hard for students like me to contact potential organizations and check